Attorney Docket No.: 944-1.68 
Serial No.: 10/082,534 



In the claims : The claims are as follows. 

1. (Previously presented) A method for registering a UE with an 
IMS so as to allow the UE to access, over a digital communication 
system, an IM service to which the UE is subscribed, the method 
including a step in which an S-CSCF of the IMS sends an AV 
request message (CMl) to an HSS, the method characterized in that 
it includes a step in which in response to the AV request message 
(CMl) , the HSS provides (31) in a AV request response message 
(CM2) a field indicating a list of services to which the UE is 
subscribed along with either information that allows establishing 
SAs for each such service or information that could be used as 
keying material or other input for other security mechanisms 
specific to each service. 

2. (Original) The method as in claim 1, further characterized in 
that in responding to the AV request response message (CM2), the 
S-CSCF of the IMS adds (32) the information included in the AV 
request response message (CM2) to an authorization challenge 
message (SM4) and forwards it to an I-CSCF of the IMS. 

3. (Original) The method as in claim 2, further characterized in 
that when the I-CSCF receives the authorization challenge message 
(SM4) , it forwards (33) it as a forwarded authorization challenge 
message (SMS) to a P-CSCF of the IMS, which parses (34) the 
forwarded authorization challenge message (SMS) , generates SPD 
entries and corresponding SAs for both P-CSCF and UE, inserts its 
SPD entries in its SPD and corresponding SAs into its SADB, and 
provides in an updated authorization challenge message (SM6) for 
the UE the SPD entries and corresponding SAs. 

4. (Original) The method as in claim 3, further characterized in 
that after receiving the updated authorization challenge message 
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(SM6) , the UE inserts (35) the SPD entries into its SPD and 
inserts the corresponding SAs into its SADB. 

5. (Original) The method as in claim 4, further characterized in 
that a register is kept for all services to allocate numbers used 
to derive keys for each service or part of a service. 

6. (Previously presented) The method as in claim 5, further 
characterized in that the keys are an integrity key and a cipher 
key and are derived by applying a mapping to an argument 
including the number allocated to the respective service or part 
of a service by the register being kept. 

7. (Previously presented) A method for registering a UE with an 
IMS so as to allow the UE to access, over a digital communication 
system, an IM service to which the UE is subscribed, the method 
including a step in which a P-CSCF of the IMS communicates to the 
UE an authorization challenge message (SM6) , characterized in 
that the authorization challenge message (SM6) includes at least 
one SPD entry and a corresponding SA derived by the P-CSCF from 
information provided to the P-CSCF indicating services to which 
the UE is subscribed along with either infonnnation that allows 
establishing SAs for each such service or information that could 
be used as keying material or other input for other security 
mechanisms specific to each service, and the UE inserts (35) the 
at least one SPD entry into its SPD and the corresponding SA into 
its SADB, so that for a predetermined time any traffic between 
the UE and the P-CSCF is secure for the services to which the UE 
is subscribed. 

8. (Original) The method as in claim 7, further characterized in 
that a register is kept for all services to allocate numbers used 
to derive keys for each service or part of a service. 
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9- (Previously presented) The method as in claim 8, further 
characterized in that the keys are an integrity key and a cipher 
key and are derived by applying a mapping to an argument 
including the number allocated to the respective service or part 
of a service by the register being kept. 

10. (Previously presented) A UE, comprising: means for receiving 
an authorization challenge message (SM6) from a P-CSCF of an IMS, 
wherein the authorization challenge message (SM6) includes at 
least one SPD entry and a corresponding SA derived by the P-CSCF 
from information provided to the P-CSCF indicating services to 
which the UE is subscribed along with either information that 
allows establishing SAs for each such service or information that 
could be used as keying material or other input for other 
security mechanisms specific to each service, and means (35) for 
inserting the at least one SPD entry into its SPD and the 
corresponding SA into its SADB, so that for a predetermined time 
any traffic between the UE and the P-CSCF is secure for the 
services to which the UE is subscribed. 

11. (Previously presented) A digital communication system 
comprising an IMS having an S-CSCF and an HSS, wherein the S-CSCF 
includes means for sending an AV request message (CMl) to the 
HSS, and the HSS includes means for providing, in response to the 
AV request message (CMl), a AV request response message (CM2) 
including a field indicating a list of services to which a UE is 
subscribed along with either infoirmation that allows establishing 
SAs for each such service or information that could be used as 
keying material or other input for other security mechanisms 
specific to each service. 
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